cset

Cyber Security Evaluation Tool for asset owners with the primary objective of reducing the risk to the nation’s critical infrastructure.

https://github.com/cisagov/cset

cd ~
git clone https://github.com/cisagov/cset.git 
cd cset 
find . -name "Dockerfile"
./CSETWebNg/Dockerfile
./CSETWebApi/Dockerfile
cp .env.example .env

.env

# CSET Web API
ConnectionStrings__CSET_DB="data source=mssql,1433;initial catalog=CSET;User Id=sa;Password=********;Encrypt=False;TrustServerCertificate=True;"

# Optional: URL to a custom CA certificate (for corporate proxies/VPNs)
# CA_CERT_URL=https://your-internal-cert-store/root_ca.crt

# Host port overrides for Docker Compose (Optional)
WEB_PORT=4200
#WEB_TLS_PORT=443
WEB_TLS_PORT=8443
API_PORT=5000

# MSSQL Server
MSSQL_SA_PASSWORD=********
ACCEPT_EULA=Y

Run compose

   1 docker compose up
   2 
   3 docker compose ps
   4 NAME         IMAGE                                                   COMMAND                  SERVICE     CREATED          STATUS          PORTS
   5 cset-api     ghcr.io/cisagov/cset/api:latest                         "dotnet CSETWebCore.…"   api         53 seconds ago   Up 52 seconds   0.0.0.0:5000->5000/tcp, :::5000->5000/tcp
   6 cset-mssql   mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04   "/opt/mssql/bin/perm…"   sqlserver   53 seconds ago   Up 52 seconds   0.0.0.0:1433->1433/tcp, :::1433->1433/tcp
   7 cset-web     ghcr.io/cisagov/cset/web:latest                         "/docker-entrypoint.…"   web         53 seconds ago   Up 52 seconds   0.0.0.0:4200->80/tcp, :::4200->80/tcp, 0.0.0.0:8443->443/tcp, :::8443->443/tcp
   8 
   9 # http://localhost:4200/
  10 
  11 docker compose exec sqlserver bash
  12 apt update 
  13 apt upgrade -y 
  14 apt install nano vim -y 
  15 
  16 cd /opt/mssql-tools/bin/
  17 ./sqlcmd
  18 ./sqlcmd -S localhost -U sa -P ********
  19 select name from sys.databases
  20 go
  21 master
  22 tempdb
  23 model
  24 msdb 
  25 exit 
  26 
  27 docker compose exec sqlserver bash
  28 cd /var/opt/mssql/backup/
  29 cd bak-files
  30 cat CSET.bak.part_a* > /tmp/CSET.bak 
  31 cp /var/opt/mssql/backup/restoredb.sql /tmp 
  32 cd /tmp
  33 cp restoredb.sql restoredb.sql.ori 
  34 chmod 666 restoredb.sql
  35 chown root restoredb.sql
  36 nano restoredb.sql
  37 # update to point to /tmp/CSET.bak 
  38 /opt/mssql-tools/bin/sqlcmd -U 'sa' -P "********" -i /tmp/restoredb.sql